Adds the value: "otcx"="%System%\otcxxh.exe" to the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Connects to a predetermined URL and uploads a keystroke log.

Listens for connections from the remote attacker on random TCP ports. If they connect, an attacker can perform any of these following actions: - Logs keystrokes - Steals .pwl files - Opens and closes the CD-ROM drive

antivirus (also check How To Remove section)Startup Optimizer will help you to remove this trojan.